unrouted vlans and asa

fightclub34

how do unrouted vlans on a cisco switch get to my ASA. Shouldn't they not be leaving that vlan. I am getting a bunch of pings hitting my firewall from unrouted vlans that are internal

Ahriakin

If the ASA does not have interfaces in those VLANs and you are sure there are no layer 3 interfaces on any routing capable device then you have a faulty switch/trunking setup somewhere. Most likely though is a misconfigured router with layer3 ports/SVIs in the problem vlans and the ASA is the default route.